Information Management p.2

-       Register data collection (set of personal data)

-       Ensure accuracy: all collected or purchased data must be correct

-       Purpose: data may only be used for indicated purpose

-       Duty to inform: affected person must recognize the usage of data and why

-       Sensitive data require special protection

-       Obligation to provide information

Changed how organizations process personal data and interaction with customers, employees and whole market (eprivacy, GDPR, FADP)

-       Consent: clear, unconditional, unambiguous terms before collecting data, receive consent to process data

-       Data erasure: respect customers, employees, research participants right to be forgotten by deleting data when no longer relevant

-       Privacy by design, by default

small text files:

-       Placed on device while browsing by website, processed and stored by browser

-       Track online activity for advertising (specific ads), considered as personal data

Types:

About duration (session vs persistent)

About Provenance (first party vs third party)

About Purpose (Marketing, statistics, preferences, strictly necessary)

EPR: ePrivacy Regulation

Availability (access to data must be possible), Integrity (ensures data are correct), Confidentiality (only those have access who need data to work and make decisions)

Risks:

Operating error: human failure --> train employees

Data theft: copying of data --> lock USB-Ports

Manipulation: modifications --> limit access

Social engineering: getting access to systems by tricks --> Require secure passwords

Malware: Viruses, trojans etc. --> Scan e-mail attachments

Force Majeure: fire, flooding etc. --> build fire-extinguisher

1. Corporate Strategy:

-       allocation of resources, finance structure, business areas

2. Business Unit Strategy (e.g. private customers, business customers)

-       positioning of business unit/division in market, generic strategy

3. Functional strategy

-       effective/efficient deployment of resource, design of main processes, required qualification of employees

-       IS Strategy: makes early market development and technology assumption (e.g. Gartner Hype Cycle: currently trending technologies)

1.  Strategic Goals: guidelines for later when strategy becomes concrete

-       Mission (orders and tasks), Vision (achieved final state)

2. Environment and company analysis:

-       SWOT analysis

3. Strategic options, development of alternatives:

-       Formulation of potential IS strategies (e.g. different strategies for same objectives)

4. Strategy Formulation (Strategic Choice, action planning, strategy selection):

-       Selection of appropriate strategy

-       Selection of measures to achieve objectives

5. Strategy Implementation:

-       Execution, implementation of selected strategy and associated measures

6. Strategic IS controlling: Ongoing monitoring whether

-       Process is adhered to or need for adaption (e.g. new technological possibilities)

IT on business: efficient, cost-effective, user-friendly provision of desired service

Business on IT: Introduction of innovation to enable new services (e.g. app on e-banking)

Where:

Strategy, Culture (IT needs to understand business culture and vice versa), Structural, Architectural

-       Accompany the complete process (from initial development to final Strategy)

-       Monitors continuous change and further development

Important aspects:

-       Transformation management

-       Separation of design levels

-       Holistic nature

-       Engineering approach

Goals: aligning information technology and business processes (long term goals)

Problems: lengthy process, short term, additional costs, several basic architectures must be coordinated

Layers:

Business perspective:  (Goals, objectives)

-        focus on business process modelling, describe objectives, strategies, conditions

Information perspective: (storage, analysis and usage of data)

-       Identification of relevant data, modelling data relationships (ER models)

Application perspectives: (applications enabling business strategy)

Internal structure, interfaces and specification of application

Technology perspective: (devices, server, clouds, etc.)

-       Information and communication technology, baseline for change, procurement of new technology

- conceptual tool containing a set of elements and their relationships, expresses business logic of a firm

- description on the value a company offers to one or several customer segments

- describes value of firms architecture and its network

--> creates, markets and delivers this value and relationship capital to generate profits and sustainable revenue streams

- p &s increasingly relying on IT

- important to avoid failures, to avoid lack of acceptance of IS strategy by company management and departments

- generate competitive advantage

- ability to determine IS Strategy that optimally, flexibly supports Business Strategy while maximizing value of IT investment

- clear view of organizational drivers

Structure:

Strategy level: Business and IS Strategy

Infrastructure and process level: Org and IS infrastructure and process

operation:

- Management of technology, IT security, User support (helpdesk etc), service level

- Total cost of ownership: indirect /direct costs

planning:

- conducting projects for planning, development, introduction of information systems in organisation etc.

- observing trends, implementing architecture, promoting acceptance by users

through the ITIL (IT Infrstructure Library):

-       Framework with processes important for IT service Management

-       Helps create and manage IT

-       Distributed and established worldwide

-       Helps understand internal IT staff or external service providers

Service Strategy: align IT with core business

Service Design: IT services supporting business

Service Transition: transition from development to operational phase

Service Operation: ensuring deliverance of service with agreed upon service levels

Continual Service Improvement: Identify and Implement improvements of service

Benefits: reduce costs, improve customer satisfaction, productivity, skills etc, helps manage risk and failure, cost-effective practices

Licenced Software: (copyright protected) Software provider and User communicate through Dealer with license agreement

- license agreement must be signed by legal owner

- Dealer can be any kind of Distributer of Software

- source code is open (shared) and accessible (not always free of charge)

- Copying and passing to third parties is permitted (open collaboration)

e.g. open source licenses (Apache License, GNU)

e.g. open source Software (Linux, Firefox)

Freeware: provided by author (legal owner) for free use, no warranty or maintenance obligation (e.g. skype)

Shareware: Can be tested free of charge --> after time, subject to fee (e.g. spotify)

Public-Domain Software: Freely available, released for public distribution and modification, no copyright (SQLite)

Standardized: ready-made, quickly available

--> less expensive, expertise of experts, pre tested, available training material, less risk

Customized: single company use, competivite advantage, developed by users (end user computing)

--> specifically limited, tailor-made, low risk of competitors using it, in-house development, less training

- Available for almost each industry (Industry specific)

Advantage: cheaper, faster than individual

Disadvantage: possible technical problems, linked to spefic hardware, software

Enterprise Resource Planning:

- planning and control of company resources

- cross departemental software solution --> control and evalutation for business processes

Structure: Shared Data model

Core Functions:

Production: stock, inventory, production

Distribution: orders, invoices, sales analysis

Accounting: receivables, accounting, budget planning

HR: payroll accounting, surcharge premium

Technical adaptation:

- Parameter: default software setting, language, currencies, mapping of structure etc.

- program modules: add-ons, plugins, function packages (warehousing etc)

- Custom programming: external, integration with other vendor software, source code

- Tools: mask, form, report generators, extendable database tables, scripts (SAP, Java, MS Office: Visual Basic)

Quality: Functionality, Reliability, Usability, Efficiency, Protability, Adaptability

General: Hardware, Software, Care, Support, Expense, Drafting of Contracts

Cost:

- One-off costs

- Running costs

Benefits:

- Quantifiable: monetarily assessable (savings, reducing overtime etc.) non monetarily-assessable (faster process, fewer missed deadlines etc)

- Non-Quantifiable: non monetarily assessable (enhanced corporate image, expanded market etc.)

Operative Management: how routine activities are performes

Middle Management: Data warehouse, Data Mart (specifically used data for analysis of operational departments), planning and controlling

Senior Management: Information system on c-level, strategy future planning

Collection of prepared data for analysis and managements reports

-       Merge data systematically from databases

-       Organize data independently of operational system

-       Create data basis fitting to analytical, decision oriented data processing (algorithms)

-       Control large amount of data and information flow

Themed: Organized to answer analytical questions (customers, products, market etc)

Unified: applies to data format (e.g. dates specified in form DD.MM.YYYY)

Resistant: data in warehouse in non-volatile (can’t be changed by operational system anymore)

Time-related: reference value explicitly recorded by time stamp

1. Dependent data mart

-       Warehouse acts as a hub (internal or external)

-       Each department creates copy of master data (data mart for sales or Customer services etc.)

-       Apply analytical processing to work  on data mart

2. No data warehouse:

-       No data warehouse from internal or external sources --> directly to data mart

-       Redundancies possible

-       More for small enterprises where no data warehouse needed

3. No data mart:

-       Data warehouse in the middle but no data mart

-       Uniformity of data

Online Analytical Processing:

-       Query method --> Links query and analysos

-       Evaluated data according to multidimensional access (Multidimensional 3D key figures: Date, Product, Retailer )